ee9cdb674e55741d989ccdeb4dbbf65ce0168a5f82e790149acde18169fcb7f4

Analysis

max time kernel
9s
max time network
138s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
12/06/2024, 09:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a029e8769e82d7ec77766a000691a009_JaffaCakes118.apk
Size

1.1MB
MD5

a029e8769e82d7ec77766a000691a009
SHA1

365d34312c5caa7467f4d5d8d271a70619246d4c
SHA256

ee9cdb674e55741d989ccdeb4dbbf65ce0168a5f82e790149acde18169fcb7f4
SHA512

8d9451aad5f693c199039fb5ccf43bebe69ab984d7b62723f31df401da0bb4084384c3ac37cdf0d94c4a8e14eab012009ed4fc5449da9b8e5d0e2bfc113e16b9
SSDEEP

24576:FHhWWPa0UB31tQUzVzvlGRvmyZzPsO1osffaCCttwAcL9UKs+0xAbSa:FBWWC0aPQ2BlGRtZzPsc1XaCXUu

Score

7^/10

banker discovery persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.tcd.appstore

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.tcd.appstore

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.tcd.appstore

com.tcd.appstore
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4156

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.tcd.appstore/databases/cloudb-journal

Filesize
512B

MD5
d03b0b6fad7b337f36f7f813dfd0bfa7

SHA1
cfb3a815ec58f2976242a979b599689252212b95

SHA256
a3eae74926e192d61550f3e7e2f571e51b496918e5eb7e2d7c415978885fa669

SHA512
8d92d1f90fb34bb3a3980af69132c4d458c1857428fbb015c3fbeb1d80b530ec29a6a8b1c11d3d00e6e78e2b5b490c07dd3a26fd000b421d1c6f4edb1ad46be4

Download Submit
/data/data/com.tcd.appstore/databases/cloudb-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.tcd.appstore/databases/cloudb-wal

Filesize
84KB

MD5
3a1230c1fa9f260e8782c129b5c491e3

SHA1
ba922916e40e30fd900c677f5e1c2c651775c965

SHA256
e01f60af5ad9db6d5a895efaf8c80c9df7d4749e6490cc09e0faf999135b35a9

SHA512
a17f41c29187fda9976bb0bd2f0faf5431f80c73339698fbfcf05e859928022256d4d5c093dc55dbd01c8d8a3f8e8e9d733dbb9126b4ea503e555d70665cc668

Download Submit
/data/data/com.tcd.appstore/databases/store.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.tcd.appstore/databases/store.db-journal

Filesize
512B

MD5
9fc6ad498810a823809485585e0f08ec

SHA1
66b9a60d0e7eac0ff5e99e6b5963a3553930463b

SHA256
02f29394d720b30482bd52fbf51e603c5b005bbc32b12bf7df11dfb2bd08e8d3

SHA512
828ef909c06cc7dd632e442c8d3bf3d775e9209db24e054775d048ed41f8b9eff1da1e4bd0eb178ef88c8fe63f4bafa1fd8e51a72f2b02b73679c242622454eb

Download Submit
/data/data/com.tcd.appstore/databases/store.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.tcd.appstore/databases/store.db-wal

Filesize
36KB

MD5
9afce990f26fad8dceed0c7eb66c54f8

SHA1
2ae613eee4131d31d7538f6b56d3ce8b501b30ee

SHA256
7c9c4be1a24e7025e11d812c5320401805aada92053cc7a768e586c52662abcd

SHA512
546420e67eaff71206ee05b56f63ff334ff3fdad299a7a0a1a1f3670b1a0b0462f8db0b195d344045c9e4d41f31b43838b10bd59f6e6b3d6aeadfe9a2befb3c5

Download Submit
/data/data/com.tcd.appstore/files/misc

Filesize
44B

MD5
3a6ebd6553114db9e3c12bd182b7b644

SHA1
6d266caa953e58f54b97caa187d0f672c6fad717

SHA256
a812e2bc385a79f0ac9d8e5cf3fc2b47f7cf5b5444064eec3c9dbc981bdcbf2b

SHA512
1b7c8d080d9b3d88a21626e71a2c7bd5fa8665019d62d43a2af9173f64a8d88a6083729b3062dfe26144f6bbc5e162974978d7e8062f056ee2c78429201fd162

Download Submit